1. Open Cheat Engine
2. Attach client
3. Search for "00 00 00 00 00 00 00 00 00 00 00 00 80 07 38 04" as a byte array
4. Bring result down to address list and browse memory region
5. Go back 8 bytes and change 0x01 to 0x00

This guide shows you how to unpatch one of the many methods of RCE on clients that have it badly patched. This guide is pretty useless because if your peers don't have RCE unpatched then you can't do anything.

1. Open up the client in a debugger
2. Search for "ioEnabled" in the current module
3. If it's badly patched there should be a "ret" and a "nop" a few lines up.
4. Change the "ret" to "push 0x4"
5. Patch the client and you're done!